Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
f5aadd4c4dfc56466404918d66c5a2bb_JaffaCakes118.exe
Resource
win7-20240729-en
Target
f5aadd4c4dfc56466404918d66c5a2bb_JaffaCakes118
Size
576KB
MD5
f5aadd4c4dfc56466404918d66c5a2bb
SHA1
75ce1ee139da9ee7c608cbcb3ef55b98197e6213
SHA256
0e12c76ff0d8cc88e106aacf489637b1608b34c40720a966ce272adc384dc1f6
SHA512
f05c9f680f09913a346e0ea84c9289681a4295010313af6a5a631c256e73604d0cf51ece4a0c2efb428dfe11352d47ecc63e7c251fe2254b221f01f4d1049f93
SSDEEP
12288:eaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:/3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE